What is claimed is: 



1 1 . A dynamic file access control and management system configured to access one or more 

2 content sources including a set of files, said system comprising: 

3 A a proxy system linked to said one or more content sources, said proxy system 

4 comprising an access control module configured to selectively obtain a file from 

5 said content sources as a function of an authorization of a user requesting said file 

6 and a set of access policies; 

7 0 B. a rights management module configured to generate a set of usage rights 

8 V associated with said file as a function of a set of predefined usage policies 

9 "% associated with said file for said user; 

l o yfj C. at least one client device having a client module configured to interface to a client 

n M operating system, said client module configured to selectively inhibit operating 

12 W system functions with respect to said file as a function of said usage rights; and 

13 D. one or more communication means, via which said file and said usage rights are 

14 provided to said client device. 

1 2. The system according to claim 1 , wherein said file and said usage rights are provided to 

2 said client device via different communication means. 

l 3. The system according to claim 1, wherein said files are static files, 

i 4 The system according to claim 1, wherein said files are dynamic files. 
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1 5. The system according to claim 1, wherein said communication means includes a secure 

2 transform configured to encrypt and encapsulate said file as a function of a session ID 

3 into a message and said client is configured to extract said file from said message. 

The system according to claim 1, wherein said proxy system further includes a user 
interface, configured to facilitate creation and editing of said access policies and said 
usage policies and association of said access policies and said usage policies with said 
files. 

The system as in claim 1, where said client device is a device from a group comprising: 

1 ) a personal computer; 

2) a workstation; 

3) a personal digital assistant; 

4) an e-mail device; 

5) a cellular telephone; 

6) a Web enabled appliance; and 

7) a server. 



1 8. The system of claim 1, wherein said proxy system and at least one of said content sources 

2 are hosted on the same computing device. 

1 9. A method of dynamic file access control and management comprising: 

2 A accessing a file available from a set of content sources, as a function of an 
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authorization of a user requesting said file and a set of access policies 
corresponding to said user and said file; 

generating a set of usage rights associated with said file as a function of a set of 
usage policies associated with said file for said user; 

communicating said file and said usage rights to said a client device of said user, 
said client device having a client module configured to interface to a client 
operating system; 

using said client module, selectively inhibiting operating system functions with 
respect to said file as a function of said usage rights. 
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